CCNA 2 - Capitulo 10

CCNA 2 - Capitulo 10

1. LAN SECURITY CONCEPTS

   • ENDPOINT SECURITY
     • NETWORK SECURITY DEVICES
       • VPN ENABLED ROUTER
         • PROVIDE SECURE CONNECTION TO REMOTE USERS ACROSS PUBLIC NETWORK
         • VPN SERVICES CAN BE INTEGRATED INTO THE FIREWALL
       • NEXT GENERATION FIREWALL (NGFW)
         • PROVIDES
           • STATEFULL PACKET INSPECTION , APPLICATION VISIBILITY AND CONTROL
           • NEXT GENERATION INTRUSION PREVENTION SYSTEM (NGIPS)
           • ADVANCED MALWARE PROTECTION (AMP)
           • URL FILTERING
       • NETWORK ACCESS CONTROL (NAC)
         • NAC DEVICES INCLUDES AUTHENTICATION , AUTHORIZATION AND ACCOUTING (AAA)
         • EX : ISE- CISCO IDENTITY SERVICES ENGINE
       • VARIOUS NETWORK SECURITY DEVICES ARE REQUIRED PROTECT NETWORK PERIMETER FROM OUTSIDE ACCESS
     • NETWORK ATTACKS TODAY
       • DISTRIBUTED DENIAL OF SERVICE (DDOS)
         • INTENTION OF DEGRADING OR HALTING
           • ORGANIZATIONS WEB SITES AND RESOURCES
         • CORDINATED ATTACK FROM MANY DEVICES
           • CALLED ZOMBIES
       • DATA BREACH
         • DATA SERVERS OR HOSTS ARE COMPOMISSED
           • STEAL CONFIDATION INFORMATION
       • MALWARE
         • HOSTS ARE INFECTED WITH MALICIOUS SOFTWARE
         • EX : RANSOMWARE SUCH AS WANNACRY
     • ENDPOINT PROTECTION
       • SWITCHES , WIRELESS LAN CONTROLERS (WLCs) AND ACCESS POINTS
         • ARE SUSCEPTILE LAN-RELATED ATTACKS
       • ENDPOINT : LAPTOPS , DESKTOPS SERVERS AND IP PHONES
       • HOW CAN THEY BE PROTECTED?
         • EMAIL SECURITY APPLICANCE
           • PHISHING ATTACKS
             • SPAM
           • SPEAR PHISHING
             • HIGH PROFILE EMPLOYEES OR EXECUTIVE MAY ELEVATED LOGIN CREDENTIALS
           • CISCO ESA
             • DESIGNED TO MONITOR SMTP
             • FUNCTIONS
               • BLOCK
                 • KNOW THREATS
                 • ACCESS TO NEWLY INFECTED SITES
               • STEALTH MALWARE
                 • EVADED INITIAL DETECTION
               • DISCARD
                 • EMAILS WITH BAD LINKS
               • ENCRYPT CONTENT IN OUTGOING EMAIL
                 • PREVENT DATA LOSS
         • WEB SECURITY APPLIANCE
           • CISCO WSA
             • FUNCTIONS
               • MITIGATION
                 • WEB-BASED THREATS
               • MALWARE SCANNING
               • URL FILTERING AND CATEGORIZATION
               • ENCRYPTION AND DECRYPTION WEB TRAFFIC
               • ADVANCED MALWARE PROTECTION
               • APPLICATION VISIBILITY AND CONTROL
               • WEB APPLICATION FILTERING
           • MITIGATION FOR WEB BASES THREATS
           • CONTROL HOW USER ACCESS THE INTERNET
         • NAC APPLICATION
           • MORE COMPLETE THAN RADIUS
         • HOST BASED INTRUSION PREVENTON SYSTEM (HIDS)
         • HOST BASES AMP
         • ADAVANCED MALWARE PROTECTION (AMP)